Privacy Policy

Last updated: April 3, 2026

Introduction

PEC Petrochemical Engineering & Construction ("PEC", "we", "our", "us") operates the epcX platform and related mobile applications for project execution, team communication, and attendance tracking. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our services. By using epcX, you agree to the collection and use of information in accordance with this policy.

This policy applies to all users of epcX, including but not limited to project managers, engineers, site supervisors, contractors, and other stakeholders who access our platform for project management and collaboration purposes.

1. Information We Collect

1.1 Personal Information

We collect the following personal information when you register and use epcX:

  • Full name, email address, and phone number
  • Job title, role, and organization details
  • Professional qualifications and certifications
  • Emergency contact information
  • Government identification numbers for site access

1.2 Project and Work Data

We collect information related to your project activities:

  • Project details, scope, and specifications
  • Task assignments and completion status
  • Time tracking and work logs
  • Attendance records and check-in/check-out data
  • Chat messages and team communications
  • Progress reports and milestone updates
  • Incident reports and safety observations

1.3 Technical and Device Information

We automatically collect certain technical information:

  • Device type, operating system, and browser information
  • IP address and general geographic location
  • Unique device identifiers and app version
  • Usage patterns and interaction data
  • Performance data and crash reports

1.4 Media and Location Data

With your consent, we may collect:

  • Photos and videos for project documentation
  • Voice recordings for safety incident reporting
  • Precise location data for site verification
  • GPS coordinates for attendance tracking

2. How We Use Your Information

2.1 Service Provision

We use your information to:

  • Provide access to epcX features and functionality
  • Authenticate users and manage account access
  • Facilitate team collaboration and communication
  • Track project progress and generate reports
  • Manage attendance and workforce deployment
  • Send notifications and updates

2.2 Service Improvement

We analyze data to:

  • Improve app performance and user experience
  • Identify and fix technical issues
  • Develop new features and services
  • Optimize resource allocation and planning
  • Enhance security measures

2.3 Legal and Safety Compliance

We use information to:

  • Comply with legal and regulatory requirements
  • Meet contractual obligations with clients
  • Ensure workplace safety and incident reporting
  • Prevent fraud and unauthorized access
  • Protect intellectual property rights

3. Information Sharing and Disclosure

3.1 When We Share Information

We may share your information in the following circumstances:

  • With Your Consent: When you explicitly authorize sharing
  • Service Providers: With trusted third-party vendors for hosting, analytics, payment processing
  • Client Organizations: With the companies you work for, for project management
  • Legal Requirements: When required by law, regulation, or court order
  • Safety Protection: To prevent harm or protect rights and safety
  • Business Transfer: In connection with mergers, acquisitions, or asset sales

3.2 What We Don't Do

We are committed to your privacy and will not:

  • Sell your personal information to third parties
  • Share data for marketing purposes without consent
  • Disclose more information than legally required
  • Retain data longer than necessary

4. Data Security and Protection

4.1 Security Measures

We implement comprehensive security measures:

  • Encryption: Data encrypted in transit and at rest using industry-standard protocols
  • Access Controls: Role-based access with multi-factor authentication
  • Secure Infrastructure: Cloud hosting with SOC 2 Type II certification
  • Regular Audits: Security assessments and penetration testing
  • Employee Training: Privacy and security awareness programs

4.2 Data Breach Notification

In the event of a data breach, we will:

  • Notify affected users within 72 hours of discovery
  • Provide details of what information was compromised
  • Explain steps taken to secure data
  • Offer guidance on protective measures users can take

5. Data Retention

We retain your information for different periods based on the type of data and legal requirements:

  • Account Information: Until account deletion or 2 years of inactivity
  • Project Data: For the duration of the project plus 7 years
  • Attendance Records: For 3 years as required by labor regulations
  • Safety Incidents: For 10 years as required by OSHA regulations
  • System Logs: For 90 days for security monitoring
  • Media Files: Until project completion plus 1 year

6. Your Rights and Choices

6.1 Access and Correction

You have the right to:

  • Access your personal information through the app
  • Request a copy of your data in portable format
  • Correct inaccurate or incomplete information
  • Update your profile and preferences

6.2 Data Portability and Deletion

You can request to:

  • Export your data in machine-readable format
  • Delete your account and associated data
  • Restrict processing of certain information
  • Opt out of non-essential data collection

6.3 Permission Controls

You can manage permissions through:

  • Device settings for camera, microphone, and location access
  • App notification preferences
  • Data sharing and privacy settings
  • Marketing communication preferences

7. International Data Transfers

epcX may store and process data in servers located outside your country. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

  • Standard contractual clauses approved by data protection authorities
  • Compliance with applicable data protection laws
  • Adequate security measures for cross-border transfers
  • Your consent where required by local regulations

8. Children's Privacy

epcX is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete such information immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. We will notify users of significant changes by:

  • Email notification to registered users
  • In-app notifications and alerts
  • Posting the updated policy on our website
  • Updating the "Last updated" date at the top of this policy

Your continued use of epcX after changes constitutes acceptance of the updated policy.

10. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email:

privacy@pecengg.com

Phone:

+91-33-1234-5678

Address:

PEC Petrochemical Engineering & Construction
Kolkata, West Bengal 700091
India

Data Protection Officer:

dpo@pecengg.com

This Privacy Policy is governed by and construed in accordance with the laws of India, without regard to conflict of law principles.